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0 Communication controller having line adapters loadable with an application program and method 
for performing the loading of a line adapter in a communication controller. 
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@ Communication controller product CCP (110) 
which includes line adapters (104-i) having each a 
storage (301) which is loaded with a general applica- 
tion program during an initialization phase. The line 
adapters allow the attachment and the connmunica- 
tlon of different telecommunication entities, e.g. a 
LAN, a teleprocessing line etc... The CCP (110) is 
connected by means of a control adapter (103) to a 
local control terminal (100) which is associated to a 
storage (101) for storing the different general ap- 
plication programs which are likely to be required by 
the different line adapters (104-i). The further in- 
cludes means (202) for storing an access key com- 
prising data relative to the types and the number of 
line adapters (l04-i) of one type which are au- 
thorized to be loaded with the general application 
program stored into the storage (101) controlled by 
said control terminal (100). The CCP has also means 
(200, 201. 202) for checking whether a loading re- 
quest received from one adapter complies with the 
contents of said stored access key in order to pre- 



vent the loading of an unauthorized line adapter. 
There is also disclosed a method for performing the 
loading of a line adapter card (104-i) which is at- 
tached to a communication controller product CCP, 
the line adapter card being loadable with a general 
application program during an initialization phase. 
The method involves the step of receiving a request 
from a determined line adapter (104-i) to be loaded 
with the corresponding general application program 
which is loaded into said said storage (101), and 
checking whether the requesting line adapter is in- 
cluded in a list of line adapters which are authorized 
to be loaded with their corresponding general pro- 
gram application. The method further involves the 
step of checking whether the number of already line 
adapters (104-i) which are of the type of the one 
which requests the loading operations does not ex- 
ceed a predetermined value, and eventually prevent- 
ing the loading of the requesting line adapter (104-i) 
in the case when one of the preceding conditions 
are not satisfied. 
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TECHNICAL FIELD 

The present invention relates to a communica- 
tion controller product CCP which includes line 
adapters having each a storage which is loaded 
with a general application program during an initial- 
ization phase prior to the data communication 
phase, said line adapter allowing the attachment 
and the communication of different telecommunica- 
tion entities, such a Local Area Network, a tele- - 
processing line etc... The invention particularly re- 
lates to a communication controller product CCP 
which is connected to a local control terminal asso- 
ciated with a large storage for storing the different 
general application programs which are likely to be 
transferred and loaded into the different line adapt- 
ers which are possibly attached. ..z: ; . 

BACKGROUND ART ^ J i 

Telecommunications networks generally involve 
the connection of a large number of telecommuni- 
cation products in order to allow data communica- 
tion in compliance with the customers* require- 
ments. Figure 1 shows a typical and known ar- 
chitecture of a telecommunication network. A host 
computer 105 is loaded with a network control 
software such as the VTAM or NOP ("Virtual Tele- 
processing Access method" or "Network Control 
Program") software largely used in the telecom- 
munication field. Host computer 105 is generally 
connected to a communication controller product 
(CCP) 110 which allows the attachment of different 
units to the telecommunication network: a Local 
Area Network (LAN) or Token ring 120 to which is 
particularly connected a terminal 122. a telepro- 
cessing line 121 such as of the type Integrated 
Service Digital Network (ISDN), a T1 line, X25. 
RVX etc... The host computer 105 is under control 
of an user by means of a network control terminal 

106 while CCP 110 can be controlled via a control 
terminal 100 through a Local Area Network 102. As 
will be explained hereinafter, control terminal 100 is 
associated with a disk storage 101. Communication 
controller product 110 includes switching means 

107 to which are connected a set of Line Adapter 
cards 104-1, 104-2 ... 104-i allowing the attach- 
ments of different external lines (the figure shows 
only the attachment of LAN 120 and teleprocessing 
line 121 for simplicity purpose) in accordance with 
the requirements of the user, and also an adapter 
card 103 for the connection of LAN network 102 to 
the CCP. Adapter card 103 permits control terminal 
100 to communicate with CCP 110 via LAN net- 
work 102. The switching means 107 permits the 
communication between the different adapters 
which are attached thereto by means of their cor- 
responding line adapter cards 104-1... 104-i and 



' therefore the communication between the different 
' terminals 122, 123 ... which are connected to the 
• telecommunication network. An user who wishes to 
^, _ „build a telecommunication network which complies 
5 ' to his requirements buys a communication control- 
ler product 110 and adds to the latter the the 
appropriate line adapters 104-1, 104-2. ... 104-i 
adapted to. the type of external line to which they 
are intended to be connected (LAN, teleprocessing 
10 line efc... ). Line adapters 104-1. 104-i generally 
includes some storage means and particularly a 
first PROM storage having a little capacity and a 
second RAM storage which conversely has a large 
capacity. The PROM storage is intended to receive 
75' a simple and elementary microcode software for 
initialization purpose while large RAM storage is 
intended to store the general application program 
.microcode used for the telecommunication be- 
'.tweeh'the adapter and CCP 107, the latter general 
20 application program being loaded from disk storage 
j.^ 101 via LAN 102 and adapter 103. The storage of 
the letter general application program in a RAM is 
advantageous. Firstly. A RAM takes less volume 
and is- cheaper than the corresponding PROM stor- 
25 ■ age having an equivalent capacity. Secondly, up- 
date and maintenance operations are made more 
easy and only requires the updating of the contents 
of storage 101. Then, an initialisation process of 
every line adapters 104-i will entail the loading of 
3d the latter, and particularly the loading of the RAM 
storage included therein, with the updated general 
application program. It should be noticed that only 
the general application program corresponding to a 
determined type of line adapter .104-i is transferred 
35 and loaded into that line adapter (that is to say a 
LAN line adapter such as line adapter 104-1 re- 
ceives the microcode corresponding to a LAN gen- 
eral application program, an ISDN line adapter 104- 
i receives a microcode corresponding to a ISDN 
40 general application program etc... ). 

For the sake of simplicity and economy, it is 
advantageous for the telecommunication suppliers ' 
to provide to every customer the same and unique 
software loaded into storage 101 and irrespective 
45 of the actual architecture of the considered cus- 
tomer, and particularly the existence of ISDN line 
adapters. LAN line adapters. T1 line adapters etc... 
When the telecommunication controller product 
110 is powered on, an initial program loading step 
50 is performed during which each of the line adapter 
104-i is recognized and identified and then loaded 
with the appropriate portion of the software existing 
• into storage 101 via LAN 102, adapter 103 and the 
switching means 107. that is to say the general 
55 application program which corresponds to the type 
of adapter which has been identified. Once every 
line adapter 104-i has been loaded with its cor- 
responding general application program, the com- 
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munication of data between the different units 
which are attached to the OOP 110 can be per- 
fornned. 

Since however, the telecommunication suppli- 
ers charge a given customer on the basis of its . s 
actual use of the software stored into storage 101,. 
it is highly desirable to prevent any indelicate cus- 
tomer from using an unauthorized part of the soft- 
ware stored into storage ioi. 

70 

SUMMARY OF THE INVENTION 

The problem to be solved by the present ap- 
plication is to provide a communication controller 
product CCP which has line adapters loaded with a is 
general application program, and a method for 
loading line adapters which are attached to a com- 
munication controller product, whereby it is made 
impossible for one customer to load a line adapter..,,' 
which has_ not been recognized by the manufac- [20 
turer of the C.CP as being an authorized line adapt-.. ' 
er. ' - . , ' 

According to the present invention, the solution 
to that problem consists in a communication con- „ [ 
troller which includes means for storing an access 25 
key comprising data relative to the types and the 
number of line adapters (104-i) of one type which 
are authorized to be loaded with the. general ap- . 
plication program which exists in the storage which 
is associated to . control terminal, and means for 30 
checking whether :a loading request received, from 
one adapter complies with the contents of stored 
access key in prder to prevent the loading of any ..^ 
unauthorized line adapter. r 

More accurately, the invention consists in a a, 35 
communication controller product CCP (110) which 7 
includes line adapters haying each a storage which 
is loaded with a a general application , program, 
during an initialization phase, said line adapters 
allowing the . attachment and the connmunlcatipn of ,.. 4o 
different telecommunication, entities, such as a 
LAN, a teleprocessing line etc.. The CCP Js 
connected by means of a control adapter to a local 
control terminal which is associated to a storage ifor 
storing the different general application programs . 45 
which are likely to be required by said line adaptr . 
ers. The conrimunication controller product is char- 
acterized in that it includes means for storing an. 
access key. comprising data relative to the types 
and the number of line adapters of one type which so 
are authorized to be loaded with the. general ap- . 
plication program transferred from the storage as 
:sociated to said control .terminal. The CCP has also 
means for checking whether a loading request re- 
ceived from one line adapter connplies with the 55 
contents of said stored access key in order to 
prevent the loading of an unauthorized line adapter. 

In a preferred embodinrient, the access key 



comprises data relative to the serial number oif the 
communication controller which is associated to the 
list of authorized line adapters. That permits an 
easy checking of the serial number of the commu- 
nication controller to prevent any abuse of the 
system. 

Preferably, the communication controller in- 
cludes means for performing a decryption process 
of the said access key, the decrypted access key 
being then stored into a non volatile storage. The 
decryption process involves a first software decryp- 
tion routine which is ^stored into a RAM and a 
second decryption process which is performed by 
a wired decryption logic which is located on a card 
which controls the power on of the machine. That 
results in a increased protection of the decryption 
process against any unauthorized analysis. 

Jhe, solution of the above problem is also 
solved, by the nnethbd according to the invention for 
performing the loading of a line adaiDter which is 
attached .to a communicatibn controller product 
CCP and which allows the connection of a tele- 
communication entity such as a LAN, a telepro- 
cessing line etc... , said line adapter being loaded 
during an initialization phase with a corresponding 
general application program which exists in a stor- 
age associated with a control terminal and can be 
transferred into the line,' adapter. The method ac- 
cording to the present invention is characterized in 
that it involves the step of receiving a request from 
a determined line adapter, to be loaded with the 
corr^sj^onding general application program, and 
checking whether the requesting line adapter is 
included in a list of line adajaters; which are au- 
thorized, to be loaded with' their corresponding gen- 
eral program application. Then, the method in- 
volves the step of checking whether the number of 
already line adapters which are of the t^pe of the 
one^_ which requests the loading opei-'atidns does riot 
exceed a^ predetermined valued and preventing the 
loadirig of Jhe requesting^ line adapter in the case 
wh^rl one of the preceding conditions are not satis- 
fied,/ ' ■ . \ ' 
Description of the drawings ' ' ^ 
Figure 1 illustrates a typical telecommunication 
architecture" ' " . 
f^igure 2 iliustrates the structure of an adapter 
1.03 in accordance with the present invention. 
Figure 3 shqwis the structure of the line adapter 
104^1 according to the present invention. 
Figure 4 is a flow chart of the key decryption 
and validation process in accordarice. with the 
.present invention. 

Figure. 5 illustrates the structure of an access 
key. ' 
Figure 6 is a flow chart of the loading process of 
the general applicaition program into the RAM of 
every line adapter in accordance with the 
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present invention. 

Description of the invention 

In accordance with the present invention, the 5 
communication controller product 110 comprises 
an adapter 103 which is detailed with respect to ' 
figure 2. Adapter .103 includes a first processor 
card 210 and a second Power Control and Service 
card 220 having respectively a power supply unit io 

211 and 215. Processor card 210 includes a pro- 
cessor 200 which is connected by means of a bus 

212 Xo a EEPR0IV1 202. to a RAM 2!01. to a switch 
interface circuit which is connected to switch 107. 

to a LAN interface 216 allowing the communication is 
between LAN 102 and processor card 210. and 
also to a I/O interface circuit 213. EEPROM is a 
storage of low capacity which is loaded ' with* a " 
small piece of microcode, and particularly a boot- , 
strap code which is required to perform and coVn- " 20 
plete an initial program 'loading 'phase during which' * ' 
an initialization procedure pjpyides, the loading of ' *, 
RAM storage ,201 with the required microcode " ' 
which will be used either for the data communica- 
tion operations and the encryption/decryption pro- ' ' 25 
cess described hereinafter, During the initialization 
procedure, the loading of RAM 201 is performed ' 
by means of a transfer of data from storage 101 via"^ 
control terminal 100. LAN" 102 and LAN interface ;*^' ' 

216. . " * i .''"'^^ 

Processor card 210 communicates with power/ 
contrpl and service card 220 by means of a bu"^' ^ 
203 comprising 'the required datia; >ddress dnti 
control busses, the latter bus 203 being connected' '/ 
to I/O interface 213 and a'l/0 Jnteriface 214 locaWd:_^ 35 
into card ,220. I/O 214 permits processor 200 tp**" ^ 
control a panel ; control^ unit 230, an encryption j 
device. 223 and a power control^ Unit 225 located '^'^ 
into card 220 by nrieahs of a bul^26/ C^^^^ 
connected to every line adapter 'l04-i.by meSins of' ' 40 
two leads (not shown" in fig! 2). A first le&d carries a^ ' 
signaL which is used during the ihitiaiization proce;-" ' 
dure to inform processor 20^6 that a line adaptef^ ' 
104-i is actually present Jn one slot. A second lead 
is used fo/ r<eset purpose whereby processor 200 is 45 
able to independently reset one among the line 
adapters 104-1. 104-2. ... 104-i. that is to say to 
start the reset microcode loaded into a EEPROM 
303 located into that particular line adapter; There- 
fore, if one problem of .failure occurs" oh one line so 
adapter, processor 200. is advantageously able to 
reset and reinitialize that particular line adapter 
104-i without disturbing the others. Panel control .; 
unit 230 located into card 220 manageis a panel 
250 by means of leads 280 and is particularly used ss 
for controlling a. (not shown) display and keyboard 
located in that panel. Consequently, processor 200 
is. able, to display messages and "infdfnnation which 



relates to the general working of CCP 110 and also 
to read the data entered on the panel and which 
have been stored into registers located into panel 
control 230. Processor card 210 and card 220 are 
continuously powered by means of unit 211. and 
unit 215 while the remainder of the communication 
controller 110, and particularly the switching means 
107.' and the line adapters 104-i are. supplied with 
DC current only when power control unit 225 sets 
on power unit 260. For this purpose, power control 
unit 225 includes a set of drivers (not shown) for 
supplying the current needed to drive a set of 
relays located into power unit 260. Therefore, the 
general powering of the machine is under control of 
processor 200 and can be achieved by two distinc- 
tive ways: locally or remotely. The powering of the 
machine can be performed locally if the user en- 
ters a power-on command directly via panel 250. 
Alternatively, the powering can also be '^achieved 
remotely by means of a power-on command which 
is transmitted from control terrhinal 100 to proces- 
sor 200 via LAN 102 and LAN intisrf ace 216. Once, 
the power-on command has been received by pro- 
cessor'260, a corresponding power-ori command is 
transmitted power control unit 225 via I/O interface 
213, bus 203. I/O interface 214 and bus 226. The 
tatter command is 'then decoded by unit 225 which 
generates an' driving current^ which is transmitted 
via lead 270 "to the relays located into-power unit 
260. — 

Power Control and Service card further com- 
prises a encryption circuit 223 which includes a 
first register 222 having an input connected to bus 
226 and a second register 221 having an output 
connected to bus 226. Moreover, registei- 222 has 
an output which is connected to the input of a logic 
circuit 204, the output of which being connected to 
an input lead of register 221.. Logic circuit. 204 
includes a set of logid component which are wired 
so 'as to perform a decryption of a N -bit word. In 
the preferred embodiment; registers 221 and 222 
are' IB-bit registers so that ioglC circuit 204 per- 
forrhs a' decV/ption of-' 16 bit-wofds:- Logic circuit 
204 basically includes a set of AND. OR and invert- 
ing cirdultsSvhich are cotinected sd as to provide 
the required transfer function. Any combination of 
the bits' of the 16 bit-word in 'order to build another 
16 bit-word can' be lisiea. BelowMs an example of a 
decryption'key: • ' ' 

' Assuming that the 16-bit word stored into reg- 
ister 22i2 is ^i^B CO EFGHIJKLm NOP" ' 
the' ""decrypted.' 16-bit* word - whic'h is storied.' into 
registeV 221 'can be'^^* ' V^ " ; ' ' - . 
A'B'C'D'ET*G'H'rj*K*L''M*N'0'P* • ' 
with' ' . * 

A = H and J ^ ^ '• 

B• = inverted B 
C*=* F and-L 
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D' = inverted D 

E'= C and N 

F* = inverted F , 

G' ^ A and P ' 
H' = inverted H 5 
r = I and P / . 

J* = inverted J 
K'= K and N 
U = inverted L 

= M and N ;o 
N* = inverted N 
0'= O and J 
P* = inverted P 

Figure 3 details the internal structure of a line 
adapter 104-i according to the present invention. 75 
Line adapter 104-i comprises a set of two distinc- 
tive cards: a first line processor card 300 and a 
second line interface card 301 which communicate 
each other via a . bus 304. Line processor card . 
includes a processor • 305 which is connected by 20 
means of, a bus 308 to .a EEPROM 303 of small ' 
capacity, a large RAM stoi'age 301, a switch inter- 
face 309 which is connected to the switching 
means 107 located into .CCP 110, and to a I/O 
interface 307 which is connected to bus 304. Line, 25 
interface card 301 is connected . to bus 304 by 
means of an I/O interface 310 and further includes 
the circuits and components which are. used for . 
adapting the line adapter 104-i to the particular 
physical medium which is considered: optical. fiber/ 30 
telephone line, a Local Area, Network etc... In figure 
3. the shown line interface card 301 is particularly _ 
adapted to .allow the attachment of a plCirality of 
teleprocessing lines and therefore has to include 
the components that are required for this purpose , 35 
and which are- well known to the skilled man, and 
particularly the components embodying a CCITT 
V24 interface allowing the connection of data circuit, ^ 
terminating equipment (DCE). EEPROM 303 'in- 
cludes a portion of elementary microcode which is / 40 
required during an initialization period when the 
considered Jine. adapter 104-i is. reset in order , to 
provide the transfer and the loading of the general 
application program from storage 101 ' into. RAM ' 
301, which as mentioned above, is used for the , 45 
normal data communication session. The loading of 
the RAM 30,1 located into line processor card of 
every line adapter 104-i .with the particular general' ' 
application program which is extracted from the ^ 
unique storage 110 is to be performed vvithout any so 
data communication .session: That loaded is al- 
lowed at the completion -of a set of checking and 
validation procedures which are detailed with re- 
spect to figure 4-8 as described hereinafter. 

Figure 4 details a flow chart of the key decryp- 55 
tion and validation process which is performed 
prior to the loading of the RAM storages included 
into Line adapters 104-1, 104-2. 104-3 ... The cus- 



tomer receives with the communication controller 
product 110 an access key provided by the manu- 
facturer being representative of the CCP 110 and 
also its authorized use. The access key is particu- 
larly shown in figure 5 arid comprises some dif- 
ferent fields. The access key comprises a first field 
501 which corresponds to the serial number of the 
CCP 1 10. A second field 502 corresponds to a first 
specific type of line adapter 104-i, for instance an 
ISDN line adapter, and also comprises data relative 
to the maximum number of authorized ISDN lines 
which can be connected to that ISDN line adapter. 
A third field 503 corresponds to a second specific 
type of line adapter 104-i, for instance a LAN line 
adapter, and also comprises data relative to the 
maximuni number of LAN line interface cards 
which are authorized etc... Therefore, the access 
key accurately defines the communication control- 
ler product 110 'and its authorized use. Before 
providing the custohner* with' the above access key, 
the manufacturer perfornris an encryption process 
being , inverse of the decryption process which will 
be performed by adapter 103 as described 
hereinafter. With respect to figure 4 again, at the 
installation of the communication controller product, 
cards 210 and 220 are powered and an initialization 
procedure procedure begins which particulariy re- 
quires the inputting, the processing and the valida- 
tion of the access key' which is associated with 
CCP 110. Firstly, the customer has to input on the 
keyboard of control terminal 100 Ihe encrypted 
access key "he received from the manufacturer, 
step 401. Step 402. the latter key is transferred via 
LAN network * 102 to adapter 103 and received by - 
processor 200 'which stores it into RAM 201. step 
403. Step 404, processor 200 tests an ERROR flag 
which is store^d into EEPROM 202 to determine 
whether the decryption and' validation procedure is 
allowed to continue.^ As will be seen below, the ' 
ERROR flag is set when' several validation ^proce- 
dure have been tried and have always failed, thus 
indicating a general failure or a misuse' of the 
system. In the latter case, the process proceeds 
directly to step 410 where processor 200 generates 
and transmits an error rhessage either to the dis- 
play on panel 250 and to control terminal 100 thus 
informing the customer that the system requires an " 
inspection. On the contrary, in the case when test 
404 indicates that the flag is reset, theri processor 
200 performs a decryption process, step 405. This 
process involves two distinctive operations: fii'Stly, 
p(;ocessor 200 performs a first elementary software* 
decryption process by means of a decryption rou- ' 
tine existing into RAM 201 which has been loaded 
from storage 101 at the beginning of the initializa- 
tion period. Then, proceissor 200 transmits the N- 
bit word resulting frorh that first. software decryption 
process to the decryption circuit 223 located in 
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card 220 by means of bus ^212. I/O 213. bus 203. 
I/O 21 4 and bus 226. The fatter N-bit word is then 
stored into register 222 and decrypted by logic 
circuit 204 which provides a fully decrypted N-bit 
word to the input of the register 221 . The succes- s 
sive decryption processes which are performeo 
firstly by the above software decryption routine 
stored into RAM 201 and -then by logic circuit 223 
provides -processor 200 with the decrypted access 
key such as. illustrated in figure 5. Processor 200 , io 
completes the decryption process by storing the 
decrypted access key into. RAM 201. Step 405. 
processor 200 performs a comparison between the 
contents of the serial number field 501 of the 
stored decrypted key with the actual serial number 75 
of CCP 110 which was stored during the manufac- ^ 
turing process in EEPROM 202. If the, contents of, 
the serial, number field 501 does not match the \^ 
actual serial data of CCP , 110. processor 200 gen- 
erates and transmits a message to the display^ of _ 20 
panel 250 and controj terminal .lipO to indicate that' \ 
the key is invalid. . step ,407/ then st^p *408, a 
counter is incremente.d and a test is perforrhed to ' 
determine whether, the key decryption and valiqa- 
Wor\ process has. not. been tried without success 25 
more than a predetermined fixed number stored 
into EEF»ROM 202. "for instance 10. If the incre-^ 
menling counter has_not yet reached the' value of 
the latter number, the process proceeds, to step ^ , 
401 again. On the contrary, if. the decryption and * 30 
validation process has failed .more thjan .that num- ' 
ber. processor 200. proceeds Jo . step 409 where , it^ 
sets the ERROR flag in order to prevent ariy further* \ 
attempt to. decrypt and validate., the access key. , . 
Then,, processor proceeds to step 410 . to indicate 35 
the user than an inspection of the. system is -r^:^., 
quired. However. : if^the cqntents of the serial num-^; 
ber. field 501 does yriatch, Jhe ,-^ctual serial, data of. . 
CCP 110, processor., 200 stqrgis thQ 
cess key into EEPROM 202'.^ step 41 1" Then Vtep^'l^ 40 
41 2 processor 200 .generates .and transmits a mes- 
sage to control terminal ,^lQOi vi^ LAN 102^ whicli"^ 
indicates , the , user . that , the access^.^key has tpe^n 
recognized, and that the y^iidatipn^. process is com- 
pleted. As..,mentioned abo>o. processor card; '210 45 
and power control arid service' card 220 are cbri- 
tinuously powered while the remainder of. the ma- 
chine is powered only during effective communica-, 
tion sessions. Howeyer, it should be noticed that , 
even in the case when cards 210 and 220 are , so 
powered-pff. the error flag keeps its contents since 
it is loaded into EEPROM 202 and there cannot be . 
reset by the customer.' Moreover, since a part, of' 
the decryption process involves* a decryption rou- 
tine loaded into. RAM 201 which is lost as soon as 55 
cards 210 and 220 are not longer supplied with^DC 
current, the decryption process can not be ana- 
lyzed by unauthorized people. Indeed, assuming 
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that Power Control and Service card is removed by 
an unauthorized people which wishes to analyze its 
content and particularly that of logic card 223, the 
power unit causes the general power-off of the 
whole machine, included processor card 210, 
which entails the lost of the decryption routine 
stored into RAM 201. Therefore, the decryption 
device according to the present invention permits a 
substantial protection to reverse engineering analy- 
sis. The decryption and validation process is in- 
volved at the installation step of the CCP 110 and 
every time the nature and the number of line 
adapters l04-i are modified. 

Figure 6 details the flow chart of the loading 
process which is involved in order to transfer and 
load the general application program into the RAM 
301 located into one line adapter 104-i. NA^en a 
determined line associated to a determined line 
adapter i04-i is to be activated, an activation re- 
quest is generated by Host computer 105 and 
transmitted to CCP 110, step 601. That activation 
request can either be automatically generated by* 
the network control prpgrann (NCP/VTAM) which is 
running into host computer 105 or generated by an 
user from network control terminal 106. Commu- 
nication controller 110 receives the activation re- 
quest and transmits it to the considered line adapt- 
er 104-i which is then received by* processor 305 
via switch interface '309 and bus 308. Step 602. 
processor i305 generates a corresponding request 
which is transmitted' via switch 107 to adaptei^ 103 
to Ynform processor 305 that a part of microcode, 
being the general.' application program correspond- 
ing to the considered ' line-adapter 104-i (ISDN. 
LAN. etc..) should be transferred from disk storage 
101 to 'the RAM located into the corresponding line 
adapter 104-i. Processor 200 receives the latter 
request an'd initiiates a validation procedure, step 
603. Fdi- thi$ purpose, processor 200 searches the 
decrypted access key which was stored into 
EEPROM 202' during the decryption and validation 
procedure of Tfgure 4 and extracts the contents' of 
the f|eld' in the Jdecrvpted access key which cor- 
respofids to * the ^ adapter considered. 

For instance, if host cbnhputer 105 has asked, for 
the' activation' bf an ISDN 'line, processor 200 ex- 
tracts from the decrypted atcess?" key 'stored into 
EEPROM 202 the 'cqftents of ' the ISDN field in 
order to bhbck Whether the'type' of iihe iirie adapter 
l04-i doffespbVids to an authorized type of line 
adapter 1 04-i ist4p '604; df^ in' other Words whether 
the^'us'er ii^ Wuthorized t6 activate an ISDN line and 
therefore* "^ti^an'sf^rs the'^ ISDN g^eral application 
program from sterage' 101 mto line ^'adapter 104-i.- 
In the case^hWeJhe type of^the iihe adapter 104 
is hot included into bne field of the decrypted 
access key, the process, proceeds to step 607 
whei-e' prpcessbr 200.genera^^ a message to line 
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adapter 104-i indicating the latter that the loading 
process can not succeed. Then step 609. a mes- 
sage is transmitted from CCP 110 to the network 
control program indicating the latter that the activa- 
tion of the considered line has not been performed. 
On the contrary, if the type of the considered line 
adapter l04-i corresponds to one field of the de- 
crypted access key stored into EEPROM 202, pro- 
cessor 200 goes to step 605 where it increments a 
counter K associated to that particular type of line 
adapter 104-i. Then step 606, processor extracts 
from the decrypted access key the number cor- 
responding to the maximum number of line adapter 
of that specific type (ISDN in our example) which 
are authorized to be operating at the same time, 
and compares that number with the value of coun- 
ter K. In the case when the value of K has been 
found to be equal or inferior to the maximum 
number, processor 200 transmits a request to con- 
trol terminal 100 via LAN 102 in order to ask the 
latter to transmits the general program application 
corresponding to the type of line adapter 104-i 
which is considered. That general program applica- 
tion is then transferred through LAN 102, Line 
adapter 103, switching means 107 to the line 
adapter l04-i and directly loaded into the RAM 
storage therein included, step 600. Then step 609. 
a report message is transmitted to network control 
program in host computer 105 to inform the latter 
that the line activation process has succeeded. 
However, if the value of K counter has been found 
to be superior to the maximum authorized number 
of line adapter ld4-i of the same type, processor 
200 goes to step 607 where it generates and 
transmits a message to the considered line adapter 
104-i in order to inform it that the request can not 
be satisfied and that the loading of the requested 
general program application will not be performed. 
Then, the process proceeds to step 609 where a 
report message is transmitted to the network con- 
trol program in host 105 to inform it that the activa- 
tion procedure failed. 

It should be noticed that the decryption and 
validation procedures performed in accordance 
with the present invention are performed locally 
and does not require any further processing from 
the network control program running into host com- 
puter 105. which has only to request the activation 
of one line and to wait for the report message 
generated and transmitted from CCP 110 indicating 
that the activation of the line has succeeded or 
failed. 

Claims 

1. A communication controller product CCP (110) 
including line adapters (104-i) having each a 
storage (301) which is loaided with a general 



application program during an initialization 
phase, said line adapters (104-i) allowing the 
attachment and the communication of different 
telecommunication entities (120. 121), said 

5 CCP (110) being further connected by means 

of a control adapter * (103) to a local control 
terminal (110) which is associated to a storage 
(101) for storing the different general applica- 
tion programs which are likely to be required 

10 by said line adapters (104-i), characterized in 

that said CCP (110) further includes : 

means (202) for storing an access key com- 
prising data relative to the types and the num- 
75 * ber of line adapters (104-i) of one type which 
are authorized to be loaded ^ith the general 
application program transif erred from the stor- 
age (101) associated to said control terminal 

; (ipo).; , : V ' \ 

20 ' ' * ■ 

means (200. 201, 202) for checking whether a 
loading' request received from' one adapter 
complies with the contents of said stored ac- 
cess key in order to prevent the loading of an- 
25 unauthorized line adapter. 

2. Communication controller according to claim 1 
characterized in that said access key com- 
prises data l^elative to the serial number of the 

30 communication controller.' ' 

3. ^ Communication controller according to claim 1 

or 2 characterized in that it' further includes 
means for performing a decryption process of 
35 i said access key. 

4. Communication cbntroller according to claim 3 
charactei'.ized in that it further comprises a 
storage (201 ) for storing a first decryption rou- 

40 'tine and a wired circuit (223) for performing a 

second decryption process, said first and sec- 
ond decryption process being performed suc- 
cessively. 

45 5. Communication controller according to claim 4 
characterized in that said storage (201) is a 
RAM storage and said wired logic circuit (223) 
is located on a card' which controls the power- 
ing of the communication controller. 

50 

6. Method for performing the loading of a line 
adapter card (104-i) which is attached to a 
communication controller product CCP. (11 6) 
and which allows the connection of a tele- 
55 communication entity (130. 121). said line 

adapter being loaded during an initialization 
phase with a corresponding general application 
program which exists in a storage (101) asso- 
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.dated to a control terminal (100) and which 
can be transferred and loaded into said line 
adapter (104-1). said communication controller 
(110) being connected to a, host computer 
(105) having a network control program run- 5 
ning therein, characterized in that it involves 
the step of : 

- receiving a request from a determined 
"line adapter (104-i) to be loaded with the 

corresponding general application pro- w 
gram,. 

- checking whether the requesting line 
adapter is included in a list of line adapt- 
ers which are authorized to be loaded 

with their corresponding general program 75 
application,. 

- checking whether , the number of already 
. , line adapters (ip4-i). which are of; the 

type of the one' which requests the. IbacJ- 
ing operations does not exceed a pre- 20 
determined yalue.f , - . . .,. 

^ - preventing the loading of the requesting 
line adapter (104.-i) in the case when one 
of the preceding conditions are not satis- 
fied. ■ . , 25 

7. Method according to claim 6 characterized in 
that in involves,.the step of storing ari access 
key comprising data indicating the types and 

the number of line adapters which are allowed 30 
to be loaded from the storage (101) which is 
associated- to said terminal adapter, and .also 
comprising data relating to the serial, number 
« ,of the communication, controller. . „ , 

' ' ' . "7 " 35 

8. Method according to claim 7 characterized' in 
that it further involves the step of performing a 
decryption process through a ficst software de- 
cryption routirieand through a hard ware, circuit 
(223), said hardware circuit being locafed on a 40 
card which cpntrols .the ,povyering of the cqm- 
,munication controller 

9. Method according to claim 7 or 8 character- 
ized in that it involves, the step of comparing 45 
the ,data relating to ^the serial number of. the ' 

/ communication controller with the actual serial 
^number and for preventing any loading pro- 
cess in case of mismatch. 
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